sign in--:--:--UTC

CVE-2026-35616

exploited in the wild☆ pin

CVSS

9.8

Reports

13

First seen

Apr 8, 2026

Last seen

Jul 10, 2026

Affected product

Fortinet FortiClient EMS

Recent reports

June 2026 CVE Landscape: 60 High-Impact Vulnerabilities Actively Exploited

Recorded Future InsiktJul 10, 2026 Critical

FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations

The Hacker NewsJul 2, 2026 Critical

Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week

The Hacker NewsJun 16, 2026 High

China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance

The Hacker NewsJun 10, 2026 High

China-linked JDY botnet expands targeting of U.S. military networks

Bleeping ComputerJun 10, 2026 High

CERT-EU Cyber Brief May 2026 – Espionage, Supply-Chain Attacks, and Ransomware Infrastructure Disruption

CERT-EU Threat IntelJun 2, 2026 High

PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

The Hacker NewsMay 30, 2026 High

Hackers exploit FortiClient EMS flaw to push EKZ infostealer malware

Bleeping ComputerMay 28, 2026 High

Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer

The Hacker NewsMay 28, 2026 High

CERT-EU Cyber Brief April 2026 – Espionage, Supply-Chain Attacks, and Critical Infrastructure Threats

CERT-EU Threat IntelMay 4, 2026 High

Threat Intelligence Report – 13 April: LAPD Breach, ChipSoft Ransomware, Qilin Campaign, Ivanti Exploitation

Check Point ResearchApr 13, 2026 Critical

FortiClient EMS SQL Injection and Access Control Vulnerabilities (CVE-2026-21643, CVE-2026-35616)

NICS TaiwanApr 13, 2026 High

Vulnerability in Fortinet FortiClientEMS (CVE-2026-35616)

GovCERT.HKApr 8, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans